- ESXI5-VM-000001 - The system must control virtual machine access to host resources - 'Memory limit'
- ESXI5-VM-000001 - The system must control virtual machine access to host resources - 'Memory reservation'
- ESXI5-VM-000001 - The system must control virtual machine access to host resources - 'Memory share'
- ESXI5-VM-000002 - The system must disable tools auto install.
- ESXI5-VM-000003 - The system must explicitly disable copy operations.
- ESXI5-VM-000004 - The system must explicitly disable drag and drop operations.
- ESXI5-VM-000005 - The system must explicitly disable any GUI functionality for copy/paste operations.
- ESXI5-VM-000006 - The system must explicitly disable paste operations.
- ESXI5-VM-000007 - The system must disable virtual disk shrinking.
- ESXI5-VM-000008 - The system must disable virtual disk erasure.
- ESXI5-VM-000009 - The system must disable HGFS file transfers.
- ESXI5-VM-000010 - The system must not use independent, non-persistent disks.
- ESXI5-VM-000011 - The system must disable VM-to-VM communication through VMCI.
- ESXI5-VM-000012 - The system must disable VM logging, unless required.
- ESXI5-VM-000013 - The system must disable VM Monitor Control during normal operation.
- ESXI5-VM-000014 - The unexposed feature keyword isolation.tools.ghi.autologon.disable must be initialized to decrease the VMs potential attack vectors.
- ESXI5-VM-000015 - The unexposed feature keyword isolation.bios.bbs.disable must be initialized to decrease the VMs potential attack vectors.
- ESXI5-VM-000016 - The unexposed feature keyword isolation.tools.getCreds.disable must be initialized to decrease the VMs potential attack vectors.
- ESXI5-VM-000017 - The unexposed feature keyword isolation.tools.ghi.launchmenu.change must be initialized to decrease the VMs potential attack vectors.
- ESXI5-VM-000018 - The unexposed feature keyword isolation.tools.memSchedFakeSampleStats.disable must be initialized to decrease the VMs potential attack vectors.
- ESXI5-VM-000019 - The unexposed feature keyword isolation.tools.ghi.protocolhandler.info.disable must be initialized to decrease the VMs potential attack vectors.
- ESXI5-VM-000020 - The unexposed feature keyword isolation.ghi.host.shellAction.disable must be initialized to decrease the VMs potential attack vectors.
- ESXI5-VM-000021 - The unexposed feature keyword isolation.tools.dispTopoRequest.disable must be initialized to decrease the VMs potential attack vectors.
- ESXI5-VM-000022 - The unexposed feature keyword isolation.tools.trashFolderState.disable must be initialized to decrease the VMs potential attack vectors.
- ESXI5-VM-000023 - The unexposed feature keyword isolation.tools.ghi.trayicon.disable must be initialized to decrease the VMs potential attack vectors.
- ESXI5-VM-000024 - The unexposed feature keyword isolation.tools.unity.disable must be initialized to decrease the VMs potential attack vectors.
- ESXI5-VM-000025 - The unexposed feature keyword isolation.tools.unityInterlockOperation.disable must be initialized to decrease the VMs potential attack vectors.
- ESXI5-VM-000026 - The unexposed feature keyword isolation.tools.unity.push.update.disable must be initialized to decrease the VMs potential attack vectors.
- ESXI5-VM-000027 - The unexposed feature keyword isolation.tools.unity.taskbar.disable must be initialized to decrease the VMs potential attack vectors.
- ESXI5-VM-000028 - The unexposed feature keyword isolation.tools.unityActive.disable must be initialized to decrease the VMs potential attack vectors.
